Security and Applet Security

What would be the best start to study Security in general, and also Applet security ? For Applets is the FAQ on Java Security from SUN enough ? What kind of knowledge is expected for the exam ? Is difference of the security model between JDK 1.1 and JDK 1.2 part of the exam as well ? Thanks, -Chris